
When prompted to grant Microsoft Defender for Endpoint permissions to filter network traffic, select Allow. Repeat steps 3 & 4 for all system extensions distributed with Microsoft Defender for Endpoint on Mac.Īs part of the Endpoint Detection and Response capabilities, Microsoft Defender for Endpoint on Mac inspects socket traffic and reports this information to the Microsoft 365 Defender portal.

Select Open Security Preferences.įrom the Security & Privacy window, select Allow. Application installation (macOS 11 and newer versions)Īt the end of the installation process, you'll be prompted to approve the system extensions used by the product. Real-time protection will not be available until the device is rebooted. MacOS may request to reboot the device upon the first installation of Microsoft Defender for Endpoint. Select Continue, agree with the License terms, and enter the password when prompted. Navigate to the downloaded wdav.pkg in Finder and open it. To complete this process, you must have admin privileges on the device. Save it as WindowsDefenderATPOnboardingPackage.zip to the same directory.įrom a command prompt, verify that you have the two files. In Section 2 of the page, select Download onboarding package. Save it as wdav.pkg to a local directory. In Section 2 of the page, select Download installation package. In Section 1 of the page, set operating system to macOS and Deployment method to Local script. In Microsoft 365 Defender portal, go to Settings > Endpoints > Device management > Onboarding. Download installation and onboarding packagesĭownload the installation and onboarding packages from Microsoft 365 Defender portal:


A successful deployment requires the completion of all of the following steps: This topic describes how to deploy Microsoft Defender for Endpoint on macOS manually. Want to experience Defender for Endpoint? Sign up for a free trial.
